Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/Nh4yxFwgMLCvldD8yPOfKAp_G_4.roa
File:                     Nh4yxFwgMLCvldD8yPOfKAp_G_4.roa (raw, json)
Hash identifier:          4LowPz3F0WvWj9FMzSRC9LKDBAO6aRwblgH1dWXdrww=
Subject key identifier:   36:1E:32:C4:5C:20:30:B0:AF:95:D0:FC:C8:F3:9F:28:0A:7F:1B:FE
Certificate issuer:       /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial:       07BA52C9
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/Nh4yxFwgMLCvldD8yPOfKAp_G_4.roa
Signing time:             Sat 01 Jan 2022 10:56:27 +0000
ROA not before:           Sat 01 Jan 2022 10:56:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50427
IP address blocks:        176.116.184.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129651401 (0x7ba52c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
        Validity
            Not Before: Jan  1 10:56:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=361e32c45c2030b0af95d0fcc8f39f280a7f1bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:65:ca:4b:84:f4:ef:8d:bf:f5:cd:34:5e:
                    cd:20:a8:64:b7:ea:49:f7:2c:22:5b:c8:cb:b6:67:
                    c5:f8:b1:83:36:58:32:31:8f:f4:7b:41:f2:79:32:
                    9a:9f:c9:ba:3a:bf:9c:a7:6d:7a:8f:cf:ea:6c:3c:
                    96:48:8a:97:67:ce:fc:42:03:16:14:45:5b:76:14:
                    a8:87:4e:77:ee:ce:01:63:b2:42:8f:93:22:ef:8f:
                    8c:a2:07:ac:a2:46:d7:85:84:a0:8b:32:70:b5:78:
                    c5:ba:e0:2c:a7:b8:e2:fb:1c:d0:43:3d:3e:14:95:
                    d6:72:95:78:8c:29:2c:d1:dc:3c:75:03:e7:10:7a:
                    d7:d6:6a:bb:78:0d:57:10:55:b3:75:b3:ea:55:25:
                    4a:a7:2e:4d:e1:1e:81:14:bb:15:0b:3b:2d:97:08:
                    13:16:cc:30:6b:51:26:c1:6b:cd:9b:b0:e7:24:1c:
                    5b:e0:65:a7:fd:b5:10:07:fa:16:38:88:73:c1:08:
                    c8:e7:74:99:9e:41:99:ea:71:38:ad:9e:51:d6:19:
                    9d:bb:8e:f3:b0:dd:8e:57:6a:10:20:0b:d9:7d:d4:
                    4f:02:4e:80:52:1e:21:d4:9e:84:b6:ad:3e:76:98:
                    04:db:bd:1d:85:e5:32:7e:0f:73:09:e0:e3:00:0c:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1E:32:C4:5C:20:30:B0:AF:95:D0:FC:C8:F3:9F:28:0A:7F:1B:FE
            X509v3 Authority Key Identifier:
                keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/Nh4yxFwgMLCvldD8yPOfKAp_G_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:ea:df:94:4c:da:41:d1:ca:9c:51:03:9a:42:b2:c7:8e:f7:
         af:68:91:bf:f4:6b:df:c1:b2:51:d3:03:7f:36:3d:d2:68:6c:
         95:ff:b2:60:49:c7:1a:db:ba:c0:ac:77:2f:f0:41:48:89:ec:
         c5:5c:ba:c2:07:6f:27:9a:2e:76:89:15:6c:72:46:2e:21:8c:
         fa:48:4f:b1:18:ba:7d:70:62:c4:64:54:39:d2:a5:20:49:1b:
         bb:43:58:b2:3e:57:3e:dd:e2:f9:17:d8:8c:8b:26:42:f6:ae:
         4a:f7:2f:a9:f2:64:ab:62:8c:ba:e6:61:5c:2e:53:04:cf:f0:
         6f:63:c2:bf:d4:6e:e3:3b:7e:f4:53:f6:9f:b6:bf:7f:57:f7:
         90:50:f9:58:44:a1:c8:0d:81:da:20:bd:2b:ce:86:e3:0a:c5:
         6c:85:31:1e:f2:71:a3:de:32:c6:9a:b8:d1:4a:0b:fe:7b:31:
         94:45:c2:41:26:be:c9:43:82:b3:36:d9:fd:15:57:4a:cd:b6:
         0e:ae:e8:9b:78:4c:c2:3a:e2:cf:2f:86:1a:0d:a9:e9:de:25:
         f8:0b:85:3f:3c:5d:17:8a:3a:09:68:a4:60:71:51:0f:a7:2f:
         88:6b:4e:55:1e:57:05:ba:03:3d:b5:4f:e7:b8:c6:88:21:8c:
         fd:7d:4e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:58 2024 by rpki-client on console-fra.rpki-client.org